Security fixes are made on the current main branch and released in the next
patch release when practical.
Please do not open a public issue for a vulnerability involving credentials, authentication, network exposure, arbitrary file access, or data loss.
Use GitHub's private security advisory flow for
TheDancingDeveloper-org/rustnzb.
Include:
- a clear impact statement;
- affected versions and configurations;
- a minimal reproduction or proof of concept; and
- any suggested mitigation.
We will acknowledge reports, investigate privately, and coordinate disclosure after a fix or mitigation is available.